Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/gjq1MTizVb0vbeiS6fNwKoAJ-98.roa
File: gjq1MTizVb0vbeiS6fNwKoAJ-98.roa (raw, json)
Hash identifier: td/7FNnAxcaaN4cNgr43h1h/pk1l7x0GL3ZuIt/TdB4=
Subject key identifier: 82:3A:B5:31:38:B3:55:BD:2F:6D:E8:92:E9:F3:70:2A:80:09:FB:DF
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019CE7651E3DD18C1284DE06E2662D678B9F
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/gjq1MTizVb0vbeiS6fNwKoAJ-98.roa
Signing time: Fri 13 Mar 2026 13:31:29 +0000
ROA not before: Fri 13 Mar 2026 13:31:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.187.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:65:1e:3d:d1:8c:12:84:de:06:e2:66:2d:67:8b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Mar 13 13:31:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=823ab53138b355bd2f6de892e9f3702a8009fbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:ef:67:34:1b:5f:a0:06:20:62:07:a1:8c:
3c:11:1b:59:e1:c2:e4:ad:19:0d:33:89:f7:7d:d7:
35:55:9c:f8:26:03:f2:9e:bb:13:c3:4f:84:2c:3b:
68:b9:ff:7a:e8:b0:ce:d4:d0:07:84:f0:36:df:8c:
85:ec:76:8f:d3:ed:01:aa:bf:9b:57:66:09:df:17:
9f:2f:1e:d1:88:75:81:0d:9b:b1:18:a0:2e:eb:99:
a9:c7:d0:fa:84:08:60:e0:61:e7:c5:9c:18:76:9c:
70:d2:ca:62:e4:98:75:11:f9:16:df:bb:92:e4:38:
45:2e:df:2f:a8:ca:05:28:f3:6d:37:d3:b6:44:f5:
f7:cf:11:33:93:20:46:49:fb:19:df:2f:28:1e:c5:
93:e9:df:bb:51:a7:55:3a:7c:46:c7:8b:bc:9e:cd:
9b:72:d3:9c:3e:da:77:6f:32:91:c2:a6:0b:68:1e:
69:94:ae:0d:99:63:c6:e6:a1:e7:3b:7d:ea:89:f2:
f4:37:bd:02:d5:05:1a:e8:b9:5b:63:c8:2e:2e:dd:
71:14:f3:33:e1:cb:21:01:bf:c4:75:a7:93:2a:96:
d5:71:63:8b:fe:ba:80:a9:cb:d6:ef:b2:4f:2d:af:
f1:5f:0a:65:04:c1:a7:6a:e8:86:47:eb:91:f4:97:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:B5:31:38:B3:55:BD:2F:6D:E8:92:E9:F3:70:2A:80:09:FB:DF
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/gjq1MTizVb0vbeiS6fNwKoAJ-98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:98:7c:d3:d6:7c:22:e7:a3:1e:a6:1a:f0:80:e6:a9:01:9e:
be:4e:17:89:5e:d9:a5:45:66:59:c0:82:77:4d:73:86:b6:d8:
6f:8b:10:9b:69:f1:32:c0:04:86:0d:ec:bc:74:8c:ed:34:1f:
1a:4a:c6:34:ee:02:d2:b6:d4:c5:81:01:22:3e:98:4e:b3:de:
9f:a9:80:ed:c0:84:60:34:42:75:45:20:7b:dc:f8:45:3b:0a:
f6:05:98:2a:a3:a9:bd:9e:23:ca:9e:5c:f0:52:8a:e8:21:3f:
10:98:4f:e3:d6:6b:cf:50:01:7a:08:9a:f1:06:f1:97:35:45:
70:9b:35:ee:06:ed:0c:20:f2:25:85:cb:35:26:ba:73:79:69:
93:11:aa:7e:85:ca:1d:aa:8e:59:92:00:49:d1:fe:0d:d2:31:
ed:2c:ad:b2:44:b0:38:37:b0:60:88:c2:08:bb:3f:28:bf:cf:
56:cc:72:63:39:9c:df:ab:29:90:3d:5f:a8:de:3a:82:58:0c:
c2:5a:ec:cc:77:a8:79:c6:d5:c7:21:7d:6b:4b:a3:34:c3:ff:
9f:4a:60:5e:bc:8e:95:dd:a1:9a:78:1c:4d:8b:f6:14:85:c2:
ce:7c:81:e2:7e:63:b9:87:0c:42:07:44:15:53:15:d3:b2:ad:
8e:e0:27:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:21 2026 by rpki-client